We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

View Complete Thread
  • Rovastar Rovastar

    5495 Posts

    MVP

    Moderator

    Re: Anyone know about www.nihaorr1.com/1.js?

    Apr 18, 2008 05:19 AM|Rovastar|LINK

    Not noticed anything.

    Looks dodgy though. I presume you have only just started getting these. Only from 11 Apr?

    That is when the domain nihaorr1.com was registered. IP geolocation shows this machine in Beijing, China

    What page are they hammering? What do the IIS logs say? Then look at that page. Nearly all hacks now are over http so it wil be the devs fault for having sloppy code.

    Troubleshoot IIS in style
    https://www.leansentry.com/